this post was submitted on 24 Feb 2024
766 points (98.9% liked)

Technology

59607 readers
3610 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Facial-recognition data is typically used to prompt more vending machine sales.

top 50 comments
sorted by: hot top controversial new old
[–] cmnybo@discuss.tchncs.de 179 points 9 months ago (6 children)

Why the hell does a vending machine need a facial recognition camera to "activate the purchasing interface"?

There should just be a set of buttons to select what you want and a window so you can see what items are available.

[–] Aatube@kbin.social 103 points 9 months ago (1 children)

Stanley sounded alarm after consulting Invenda sales brochures that promised "the machines are capable of sending estimated ages and genders" of every person who used the machines without ever requesting consent.

[–] Nythos@sh.itjust.works 59 points 9 months ago (1 children)

That is incredibly invasive of people’s privacy what the fuck

load more comments (1 replies)
[–] canis_majoris@lemmy.ca 40 points 9 months ago

Freedom costs ~~a buck 'o five~~ your personal data.

[–] SoupBrick@yiffit.net 32 points 9 months ago (1 children)
[–] NatakuNox@lemmy.world 19 points 9 months ago* (last edited 9 months ago) (1 children)

Yup it's for "advertising" say for example the Army wants to know which areas have the most fighting aged men. So posters and recruiters know where to hang out. (this is the most extreme example.)

[–] darth_helmet@sh.itjust.works 7 points 9 months ago

Vending machine company sells facial recognition and temporal location data to a data broker who enriches it to enhance identifiability and this data is sold to a stalker who uses it to murder people. That’s a more extreme, but certainly not most extreme, example.

[–] LesserAbe@lemmy.world 16 points 9 months ago

I saw some posts about a similar technology in the meetings and events industry: a company is selling "facial analysis" not "facial recognition." They try to get around privacy laws by saying "well our technology does scan every single face it sees, but it doesn't store that image, it just determines age, gender, race and emotional sentiment and adjusts tallies for those categories in a database."

It's still information gathering I didn't consent to while attending a conference, and it's a camera with the potential to be hacked.

Of course it's always about marketing and advertising. They want to have a heat map of which areas are popular and at what times. In the case of events so they can sell to sponsors and exhibitors. In this university it's less clear. Do the vending machines have a space to sell ads? That would be my guess.

[–] magnetosphere@kbin.social 13 points 9 months ago

Because people are dumb. If the machine knows when someone is looking at it, it can stop doing whatever it does to try and get your attention, and put itself in “sales mode”.

Still, you’re right. It seems like an overly complicated and expensive solution. Old-fashioned vending machines did the job just fine.

load more comments (1 replies)
[–] _number8_@lemmy.world 148 points 9 months ago (4 children)

why do people think it's okay to do this shit? if you're coding facial recognition for a vending machine, that's like 80 steps too far down the capitalism ladder

if you took this machine back to the 1920s and told people what it was doing, they'd shoot at it. and probably you

[–] random9@lemmy.world 20 points 9 months ago* (last edited 9 months ago)

80 steps too far down the capitalism ladder

This is the result of capitalism - corporations (aka the rich selfish assholes running them) will always attempt to do horrible things to earn more money, so long as they can get away with it, and only perhaps pay relatively small fines. The people who did this face no jailtime, face no real consequences - this is what unregulated capitalism brings. Corporations should not have rights or protect the people who run them - the people who run them need to face prison and personal consequences. (edited for spelling and missing word)

[–] Kornblumenratte@feddit.de 14 points 9 months ago (1 children)

In the article is a sound explanation: the machine is activated by detecting a human face looking at the display.

If this face recognition software only decides "face" or "not face" and does not store any data, I'm pretty sure this setup will be compatible with any data protection law.

OTOH they claim that these machines provide statistics about age and gender of customers. So they are obviously recognising more than just "face yes". Still – if the data stored is just a statistics on age and gender and no personalised data, I'm pretty sure it still complies even with 1920s data protection habits.

I'm pretty sure that this would be GDPR conform, too, as long as the customer is informed, e.g. by including this info in the terms of service.

[–] yuriy@lemmy.world 20 points 9 months ago (2 children)

If I need to accept a TOS to use a vending machine, I don’t need to use that vending machine.

load more comments (2 replies)
load more comments (2 replies)
[–] ChaoticNeutralCzech@feddit.de 101 points 9 months ago (3 children)

The students should get together and jack the machine away into their hacking club and do some reverse engineering, so that we get more information on how the data collection worked as opposed to just trusting the company's statements. If a hacking group like the German Chaos Computer Club got behind this, they could release their findings while keeping the perpetrators anonymous. However, I’m pretty sure the machine is just a frontend to a server, which got shut down as soon as the students complained, with no GDPR-like checkout being available in the jurisdiction.

[–] Hamartiogonic@sopuli.xyz 14 points 9 months ago (8 children)

When you start tinkering with a machine learning model of any kind, you’re probably going to find some interesting edge cases the model can’t handle correctly. Maybe there’s a specific face that has an unexpected effect on the device. What if you could find a way to cheese a discount out of it or something?

[–] redcalcium@lemmy.institute 17 points 9 months ago (4 children)

Imagine a racist vending machine. The face recognition system think this customer is black with 81% confidence. Let's increase the price of grape soda! Oh look, a 32 year old white woman (79% confidence). Better raise the price of diet coke!

load more comments (4 replies)
[–] I_like_turtles3@lemmy.world 9 points 9 months ago (1 children)

Maybe there’s a specific face that has an unexpected effect on the device.

Imagine AI bsod when seeing you

load more comments (1 replies)
load more comments (6 replies)
[–] fastandcurious@lemmy.world 7 points 9 months ago

After that, set the thing on fire and throw it in the manufacturers office

[–] Tristaniopsis@aussie.zone 65 points 9 months ago (1 children)

“Where Cadillac Fairview was ultimately forced to delete the entire database, “

LOL yeah right.

“OK BUBBA! WE DONE DEE-LEETED THE ENTIRE THANG!!”

Bollocks.

They probably gave the ‘enforcement’ agency a blank hard drive and said “Well, gee, shucks. That’s all we had!”

[–] BreakDecks@lemmy.ml 17 points 9 months ago (3 children)

Why are you caricaturing Canadians as Hillbillies? They didn't even apologize once, this is totally unbelievable.

[–] dangblingus@lemmy.dbzer0.com 14 points 9 months ago

People from Alberta larping that they're Americans.

load more comments (2 replies)
[–] theodewere@kbin.social 63 points 9 months ago

"over 5 million nonconsenting Canadians" were scanned into Cadillac Fairview's database

fully scanned facially by automated kiosks in malls.. the database was deleted only after an investigation..

[–] grandma@sh.itjust.works 35 points 9 months ago (2 children)

I love how vending machines run windows now

[–] pete_the_cat@lemmy.world 20 points 9 months ago (4 children)

Tons of Point of Sale terminals run Windows instead of Linux for some reason, probably because the software they run is only written for Windows.

[–] grandma@sh.itjust.works 16 points 9 months ago (18 children)

Makes sense, but a vending machine shouldn't need a fully fledged OS in the first place imo

load more comments (18 replies)
load more comments (3 replies)
[–] robber@lemmy.ml 9 points 9 months ago (4 children)

Just imagine the license fees.

[–] jabathekek@sopuli.xyz 7 points 9 months ago

That's why the need facial recognition, to sell the data to pay for licensing fees.

load more comments (3 replies)
[–] db2@lemmy.world 26 points 9 months ago

To the people that allowed that gross invasion to happen:

Oopsie woopsie, diddums make a widdle fucky wucky? Yes you did. Yes you did.

Then do what you'd do to any other child: take away the toy they misbehaved with.

[–] Kissaki@feddit.de 21 points 9 months ago (1 children)

"facial recognition exe" doesn't say anything about a "face image database" as this post title claims.

[–] teamevil@lemmy.world 15 points 9 months ago (1 children)

What the hell else could they be doing with the data? Scanning a face without a database is absolutely pointless.

[–] Kissaki@feddit.de 10 points 9 months ago* (last edited 9 months ago) (3 children)

The linked article tells you: Recognize when someone stands in front of the vending machine.

"the data" is interpreted. Not stored or matched.

[–] CaptPretentious@lemmy.world 19 points 9 months ago* (last edited 9 months ago) (2 children)

Sure that's their claim but they're not asking 'why have that type of tech anyways'.

If it's supposed to just act as a motion sensor, we've had those for decades. None of which needed to register if it was a face or not. Why isn't the purchasing interface just always there, why is it an interface, and why is it not just a button that says press to start...

Why is there a computer in there that's been trained on how to recognize what a face is in order to open up a purchasing interface. What would be the point of investing that much research and development if it was just doing something that could have been accomplished in the '90s with tech that you could have bought it radio shack.

[–] brianorca@lemmy.world 8 points 9 months ago

Article says "the machines are capable of sending estimated ages and genders" so it's not recognizing individuals, but perhaps adjusting the sales pitch for who it sees walking by.

(But it's a collage campus, so most students will be around the same age. Maybe it pitches different things to teachers?)

load more comments (1 replies)
[–] uis@lemm.ee 17 points 9 months ago

"Why do you need fingerprint reader?"

"To recognize when someone touches the vending machine."

load more comments (1 replies)
[–] devilish666@lemmy.world 19 points 9 months ago (1 children)

Hmm.... facial recognition vending machine huh....
Finally it's time for my jammer & some script from c/netsec to shine

[–] AFC1886VCC@reddthat.com 16 points 9 months ago (1 children)

Time for me big sledgehammer to shine

load more comments (1 replies)
[–] pHr34kY@lemmy.world 12 points 9 months ago* (last edited 9 months ago) (2 children)

I'd doubt it's collecting or transmitting much. It's probably just estimating age, sex, race etc. and using it to decide which promotion to put on screen. It's possibly collecting these to determine what type of people use the machine. Similar to those billboards in shopping centres.

Storing each individual to recognize later or identify online seems like a stretch.

If it did have a user bio database, it would be centralised and not on the machine itself.

[–] pulaskiwasright@lemmy.ml 36 points 9 months ago

Still not ok.

[–] doctorcrimson@lemmy.world 7 points 9 months ago* (last edited 9 months ago) (1 children)

I think the problem is that it is storing the user faces, at all. If it were simple identifying each person's characteristics there would be no reason to save that data for later. Also, apparently the company advertises that the machine does transmit this data for estimating age and gender for every purchase.

load more comments (1 replies)
[–] nyakojiru@lemmy.dbzer0.com 11 points 9 months ago (1 children)

The first question that came to my mind was - A M&M vending machine?. The the actual fuck society

load more comments (1 replies)
[–] autotldr@lemmings.world 10 points 9 months ago

This is the best summary I could come up with:


The Reddit post sparked an investigation from a fourth-year student named River Stanley, who was writing for a university publication called MathNEWS.

Where Cadillac Fairview was ultimately forced to delete the entire database, Stanley wrote that consequences for collecting similarly sensitive facial recognition data without consent for Invenda clients like Mars remain unclear.

Stanley's report ended with a call for students to demand that the university "bar facial recognition vending machines from campus."

Some students claimed on Reddit that they attempted to cover the vending machine cameras while waiting for the school to respond, using gum or Post-it notes.

The technology acts as a motion sensor that detects faces, so the machine knows when to activate the purchasing interface—never taking or storing images of customers."

It was only after closing a $7 million funding round, including deals with Mars and other major clients like Coca-Cola, that Invenda could push for expansive global growth that seemingly vastly expands its smart vending machines' data collection and surveillance opportunities.


The original article contains 806 words, the summary contains 166 words. Saved 79%. I'm a bot and I'm open source!

[–] KuroeNekoDemon@sh.itjust.works 8 points 9 months ago (4 children)

Time to hack the vending machine snd delete all the partitions off of it and render it unusable

load more comments (4 replies)
load more comments
view more: next ›